trustedCredentialsOrigins
Getter
Origins (e.g. "https://tiles.example.com") to which map layer providers may send credentials —
both the basic-auth credentials stored in the layer settings and browser credentials for
SSO (i.e. Windows Authentication) retries after an NTLM or Negotiate http 401 challenge.
Only enforced when restrictCredentialsToTrustedOrigins is enabled.
For basic-auth, the origin of each map layer's settings URL is always implicitly trusted; for SSO,
origins must be explicitly listed here.
Entries are normalized to their origin (scheme + host + port); only http: and https: URLs are accepted,
and any other entry is ignored and logged. Opaque schemes such as file:, data:, about: and custom
Electron protocols are rejected because they all share the same serialized origin, so trusting one would
trust every other.
trustedCredentialsOrigins: ReadonlyArray
Returns - ReadonlyArray
Setter
trustedCredentialsOrigins(origins: ReadonlyArray
| Parameter | Type | Description |
|---|---|---|
| origins | ReadonlyArray |
Returns - void
Defined in
Last Updated: 03 September, 2026